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i 1 . A method for selectively auditing^cesses to a relational database 
comprising: 

receiving a query from a client at^database server that processes queries 
for the relational database system; 

processing the query at the database server to produce a query result; 
creating an audit reco^u for rows in relational tables that are accessed by 
the query and that satisfy dn auditing condition; 

recording the ajrait record in an audit record store; and 
returning tWquery result to the client. 

2. The method of claim L^urther comprising modifying the query 
prior to processing the query jsojftm processing the query causes the audit record 
to be created and recordedJpri>ws in relational tables that are accessed by the 
query and that satisfy'fne auditing condition. 




^ 3. The method of claim 1 , wherein the^ffiditing condition is 
2 -^associated with a table in the relational databa^system. 




1 4. The method of claim ^wherein the auditing condition includes a 

2 plurality of auditing conditions. / 

1 5 . The method of claim 1 , wherein the audit record includes: 

2 a user name for a user making the query; 

3 a time stamp specifying a time of the query; and 

4 a text of the query. 
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6. The method of claim 1 , wherein /reating the audit record includes: 
determining if auditing is enabled; and i 
creating the audit record if auditing isyfenabled. 



1 7, The method of claim 6, wh^frein auditing is enabled on a table by 

2 table basis. 

1 8. The method of claim 1 , ^herein the audit record is created while 

2 the query result is being generated. 

1 9. The method of claim , wherein the audit record is created after the 

2 query result is generated. 

1 10. The method of clajfm 1 , wherein the auditing condition includes a 

2 condition for a field within the relational database system. 



1 1 1 . A computer-readable storage medium storing instructions that 

2 when executed by a computer fcause the computer to perform a method for 

3 selectively auditing accesses fo a relational database system, the method 

4 comprising: 

5 receiving a query fe6m a client at a database server that processes queries 

6 for the relational databas^system; 

7 processing the query at the database server to produce a query result; 

8 creating an audit record for rows in relational tables that are accessed by 

9 the query and that satisfy an auditing condition; 
1 0 recording the/audit record in an audit record store; and 
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1 1 returning the qupfy' result to the client. 

1 12. The compute-readable storage medium of claim 1 1, wherein the 

2 method further co&fop^s modifying the query prior to processing the query, so 

3 that processing t^c^ry causes the audit record to be created and recorded for 

4 rows in rela^onal tables that are accessed by the query and that satisfy the auditing 

5 condition. 

1 3 • Th e computer-readable storage medium of^aim 1 1 , wherein the 
auditing condition is associated with a table in the relational database system. 

1 14. The computer-readable storage medium of claim 1 1 , wherein the 

2 auditing condition includes a plurality of audjtfing conditions. 

1 15. The computer-readable ^forage medium of claim 1 1 , wherein the 

2 audit record includes: / 

3 a user name for a user malting the query; 

4 a time stamp specifying a time of the query; and 

5 a text of the query. / 

1 16. The computer-readable storage medium of claim 1 1 , wherein 

2 creating the audit record includes: 

3 determining if auditing is enabled; and 

4 creating the audit record if auditing is enabled. 

1 Vi. The computer-readable storage medium of claim 1 6, wherein 

2 auditing is enabled on a table by table basis. 
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1 1 8. The computer-readable storage medium of clainaf 1 1 , wherein the 

2 audit record is created while the query result is being generated. 

1 19. The computer-readable storage mediun/of claim 1 1 , wherein the 

2 audit record is created after the query result is generated. 

1 20. The computer-readable storage medium of claim 1 1 , wherein the 

2 auditing condition includes a condition for aiield within the relational database 

3 system. / 

1 2 1 . An apparatus that selectively audits accesses to a relational 

2 database system, comprising: / 

3 a database server; / 

4 a receiving mechanism, a/ the database server, that is configured to receive 

5 a query from a client; / 

6 a query processor thams configured to process the query at the database 

7 server to produce a query result; 

8 an auditing mechanism that is configured to, 

9 create an audit record for rows in relational tables that are 

1 0 accessed by the query and that satisfy an auditing condition, and to 

1 1 / record the audit record in an audit record store; and 

12 a returning mechanism that returns the query result to the client. 

1 22. I The apparatus of claim 2 1 , further comprising a query modification 

2 mechamsrtt/foat is configured to modify the query prior to processing the query, so 

3 that processing the query causes the audit record to be created and recorded for 
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1 rows iii&lational tables that are accessed by the query and that satisfy the auditing 

2 co^ftibrr. 

1 ^^tdt^ 23 * ThC ^P 3 ™* 118 of claim 2 1 ' wh erein the auditine^ondition is 

2 ^associated with a table in the relational database system. / 

1 24. The apparatus of claim 2 1 , wherein tKe auditing condition includes 

2 a plurality of auditing conditions. / 

1 25 . The apparatus of claim 2 1 , xvherein the audit record includes: 

2 a user name for a user making the query; 

3 a time stamp specifying a tim/ of the query; and 

4 a text of the query. / 

1 26. The apparatus of claim 2 1 , wherein the auditing mechanism is 

2 configured to: / 

3 determine if auditing is enabled; and to 

4 create the audit record if auditing is enabled. 

1 27. The apparatus of claim 26, wherein the auditing mechanism is 

2 configured to enaMe auditing on a table by table basis. 

1 28 . / The apparatus of claim 2 1 , wherein the auditing mechanism is 

2 configured to create the audit record while the query result is being generated. 

1 >29. The apparatus of claim 2 1 , wherein the auditing mechanism is 

2 configured to create the audit record after the query result is generated. 
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30. The apppritus of claim 2 1 , wherein the auditing condition includes 
a condition for a fi^ta within the relational database system. 
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